Roundcube Webmail 1.6.18 Security Update: Multiple Vulnerabilities (SSRF, RCE, LFI)

Vulnerability Overview Roundcube Webmail 1.6.18 is a security update release that fixes several recently reported security vulnerabilities. These vulnerabilities include: CSS basic authentication bypass in content proxy SSRF bypass via specific local address URLs SSRF filter bypass via / hostnames Remote content block bypass via unclosed in attribute LDAP filter injection in via unescaped substitution Arbitrary Sieve script injection by bypassing manage sieve disabled actions via filter rule names RCE driven by in the tags plugin IMAP command injection due to asynchronization between email search and byte count Password token leakage in the modoboa driver via user-controlled Stored XSS in the "Add to Address Book" operation HTML/CSS sanitization bypass via SVG by attribute Scope of Impact These vulnerabilities may affect all users running versions prior to Roundcube Webmail 1.6.18. The specific impact depends on the exploitation method of each vulnerability, potentially leading to severe consequences such as remote code execution, data breaches, and privilege escalation. Remediation It is recommended that all Roundcube users in production environments immediately upgrade to version 1.6.18, and back up data before updating. Specific remediation measures include: Add basic authentication verification for content proxy CSS Fix SSRF bypass via specific local address URLs Fix SSRF filter bypass via / hostnames Fix remote content block bypass via unclosed in attribute Fix LDAP filter injection in via unescaped substitution Fix arbitrary Sieve script injection by bypassing manage sieve disabled actions via filter rule names Fix RCE driven by in the tags plugin Fix IMAP command injection due to asynchronization between email search and byte count Fix password token leakage in the modoboa driver via user-controlled Fix stored XSS in the "Add to Address Book" operation Fix HTML/CSS sanitization bypass via SVG by attribute POC Code or Exploit Code No specific POC code or exploit code was provided in the page.

Goal Reached Thanks to every supporter — we hit 100%!

Roundcube Webmail 1.6.18 Security Update: Multiple Vulnerabilities (SSRF, RCE, LFI)

More from this source